You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
Mail to domains below .me or .org (and other zones amid a DNSSEC key rollover) no longer
stays in the queue with DNSSEC: the MX records of … do not validate. The DNSSEC lookups for
DANE now go over TCP: the zone's key set no longer fits a UDP answer, came back truncated, and
failed to decode, so every name below it looked bogus.
Security
rustls-webpki 0.103.16, webpki-roots and webpki-root-certs 1.0.10: distrusted emSign
intermediates are no longer accepted (RUSTSEC-2026-0381, -0382, -0383).